Total 40,006 Full-time IT Security Analyst job vacancies in Malaysia

Responsibilities :

● Analyze and prioritize vulnerabilities based on severity, potential impact and business risk, and collaborate with relevant teams to implement effective mitigation strategies.

● Provide strategic guidance, insights, and direction on technological, cybersecurity, and policy-related topics.

● Lead and participate in the development, implementation, and continuous improvement of incident response procedures, and processes.

● Collaborate with other teams at multiple geographic locations to investigate and document security incidents, root causes, and recommend remediation actions.

● Planning and appraising ongoing assessment of antivirus, application control, firewall, SIEM, VPN, SSL, intrusion detection or intrusion prevention and other network component policies.

● Managing and configuring security systems such as firewalls, intrusion detection and prevention systems, anti-virus software, and other security-related software and hardware.

● Monitoring systems, servers, and networks to detect and respond to potential security threats or suspicious activities.

● Developing and implementing security policies and procedures that ensure the organization’s data

and systems are protected against cyber threats.

● Conduct regular vulnerability assessments and penetration testing to identify potential security

weaknesses and risks to make improvements in the organization’s security.

● Report all security incidents to the home office and work with corporate IT on response and resolution strategy.

● Contribute to the development and execution of security awareness training programs for employees to enhance security awareness and best practices.

● Stay up to date with the latest cybersecurity threats, attack techniques and incident response strategies.

Requirements :

● Bachelor’s degree in computer science, information technology, or equivalent experience.

● 5+ Years of experience in a cyber or information security management role.

● Strong knowledge of the latest cybersecurity threats, trends, modern cybersecurity concepts, and technologies (zero trust, CIS Controls, OWASP, MITRE ATT&CK, XDR, CloudSec, AppSec, NIST, ITIL, Azure Well Architected Framework, etc).

● Experience in domains of Cyber Security Operations, Incident Response, Forensic Investigation, Threat Intelligence, or Vulnerability Management preferred.

● Ability to manage and configure security systems, monitor network traffic and system logs, conduct regular security assessments and respond to security incidents.

● Demonstrated understanding of business processes, IT risk management, and related standards.

● Proficiency in utilizing industry-standard tools for vulnerability scanning, assessment, and penetration testing.

● Excellent problem-solving skills and the ability to think critically under pressure.

● Effective communication and interpersonal skills, with the ability to collaborate across teams and convey technical concepts to non-technical stakeholders.

● Proven track record of staying current with evolving cybersecurity threats and best practices.

● Exceptional planning and organizational skills, and excellent written and oral communication.

● Self-starter with initiative and the ability to effectively prioritize and execute tasks with direction from corporate headquarters.

● Professional information security certification preferred, such as:

○ CompTIA Security+

○ Certified Information Systems Security Professional (CISSP)

○ Certified Information Systems Auditor (CISA)

○ Certified Information Security Manager (CISM)

Location: East area

HOW TO APPLY :

Interested candidates, please submit your resume by clicking on “Apply Now” or aliceyap(a)hkmsvs.com

All applications will be treated in the strictest confidence and only shortlisted candidates will be notified

Yap Lay Choo

EA Licence No. 03C5391 | Registration No. R1987101

IT Security Trainer
Hemel Hempstead (Hybrid – 50% Office / 50% Remote)
Competitive Annual Salary + Bonus and Benefits

About the role:
Are you passionate about cybersecurity and eager to share your knowledge with others? We are looking for an experienced IT Security Trainer to join our team. This role is pivotal in improving Haven’s cyber security awareness making use of their proven technical expertise and skills in the field to do so.

This role is critical in ensuring all team know their information security responsibilities and how they can protect the business’s information assets and technology from unauthorised access, alterations, destruction, or disclosure.

The Cyber Security Trainer will evangelise the latest security concepts and best practices, and will be expected to lead by example - using their technical security expertise to amplify the message.

Your Opportunity:
This is an exceptional opportunity to lead and shape the future of cybersecurity training within our organisation. You will have the chance to:
Develop and refine our cybersecurity training curriculum, ensuring it reflects the latest industry standards and threat landscapes.

Conduct engaging training sessions for a variety of audiences, including technical and non-technical Team, ensuring all Team are aware of and can adhere to our security policies and best practices.

Mentor and coach IT Security Team to identify training needs and create targeted programmes designed to mitigate risks and enhance our security posture.

Stay abreast of the latest cybersecurity trends, threats, tools, and technologies to ensure our training material is current and relevant.

Demonstrate best practice and leading by example using the latest security tools and methodolgy

Work as a proactive member of the security team in a technical capacity, ensuring that threats are minimised, mitigated and effectively managed.

What we’d like you to bring:
The skills and experience we’d like to see from you:
Proven experience as an IT Security Trainer, Cybersecurity Educator, or similar role.

In-depth knowledge of cybersecurity principles, and best practices.

Extensive Cybersecurity experience across multiple domains (e.g. assets, networks, identity, operations, risk, and development) in large and complex organisations

Experience of implementing security standards across an organisation

Experience developing and delivering a wide range of training materials and sessions, from bitesize to workshops to comprehensive training programmes.

Excellent communication and presentation skills, with the ability to engage and educate audiences of varying technical backgrounds.

Educated in the field of IT Security (E.g. Bachelor's or Master's degree in Information Security or similar)

Previous experience as a security analyst, engineer or leader, demonstrating first person experience and ‘deep insight’ 

What’s In It For You?
- Holiday allowance that rises with service, plus a ‘Holiday Buy Scheme’
- Annual bonus
- 20% discount on both Haven and Warner Hotels holiday for you, family and friends
- Comprehensive wellbeing support
- Access to the Bourne Leisure corporate box at the O2 Arena ,London
- Exclusive discounts with corporate partners
- Exciting career pathways, including Learning and Development opportunities such as Apprenticeships and Degrees
- Enhanced family friendly policies and pay (eligibility criteria applied)

Who are we?
We’re part of an award-winning Bourne Leisure family, which includes Haven & Warner Hotels. We have 9,000 fantastic team members and 39 beautiful seaside locations and our HQ based in Hemel Hempstead.

What’s it like to work with us?
Working with us is ultimately defined by our exceptional people and teams. At Haven, we take pride in our Breath of Fresh Air culture, which focuses on valuing and supporting every team member. We prioritise openness and transparency in our interactions allowing our team members to be their authentic selves.
We operate a hybrid working model, meaning 50% of your working week will be spent at the office, occasionally on Park, or at external events.

What can you expect during the recruitment process?
The interview process will be up to 3 stages and may contain a presentation or skills test, depending on the role. If you require any support or reasonable adjustments to help you perform at your best during this process, please let us know.

Diversity, equity, and inclusion are at the heart of who we are and what we do. Our commitment to these values is unwavering and they are central to our mission. We encourage applications from all backgrounds, communities and industries and we are happy to discuss any reasonable adjustments or flexibility that you may require, including whether a role can be part-time or a job-share.

We genuinely care about every candidate's experience during the recruitment process and are here to provide support where we can. If you require any assistance or reasonable adjustments while applying, please don't hesitate to reach out to us at resourcingteam@bourne-leisure.co.uk.

Hi Everyone, PT Asuransi Jiwa Inhealth Indonesia Official (Mandiri Inhealth) is currently looking for suitable candidates to fill the position of Senior IT Security for our Head Office at Mega Kuningan, South Jakarta. Here are some of the details :

• Bachelor’s degree in Information Technology or System Information or a related field.
• Minimum of 5-10 years as a IT Security or IT Cyber Security
• Familiar with common security controls and security flaws for modern Mobile Application, Web Applications, APIs and Cloud Infrastructure
• Understands the OWASP testing methodology
• Manage reporting related Information System Security status
• Manage operational SIEM & Information System Security day to day
• Familiar with common security controls and security standard such as NIST
• Offensive Security certifications is an advantage such as CEH Pratical or OSCP /OSCE certifiied

· 8 - 10 years of IT Security experience in administration and management of IT Security technologies primarily Symantec Data Loss Prevention, Symantec Endpoint Protection, Email Security, Data Classification and other endpoint & data security solutions;

· Should be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;

· Knowledge of different domains of IT Security;

· Working & hands-on experience in administering the IT Security Solutions;

· Must have experience in working in similar Production setup in Run (Operations) mode;

· Ability to apply risk based approach while working on assigned responsibilities;

· Experience in defining, implementing, and enforcing enterprise-level IT security policies for endpoint and data security solutions;

· Must have working experience in managing endpoint security solution for a Large enterprise level environment, working experience in financial organization is preferred;

· Excellent in analytical, communication and documentation skills;

· Must have strong understanding of ITIL processes and comfortable working in process oriented environment

Job Description

Department: Business Engineering
Report to: Manager
Supervise:
Functional Relationships with: MES + ASEAN OSA OPA & Japan

Position Profile:
Based in: Singapore
The successful candidate will: Responsible to provide adequate IT security to MES & OSA, liaise with MMC IT security team, monitor security logs

Key Duties & Responsibilities:

• Work as an IT Security coordinator & Security operation center leader for ASEAN region
• Align cyber security needs with the business direction
• Initiate, develop, and maintain IT security policies, standards and procedures
• Facilitate a comprehensive Cyber Security training, awareness program and business continuity plans
• Perform IT Security risk assessments, propose and track remediation tasks
• Ensure IT compliance & governance measures are in place & followed
• Conduct audits of internal IT services and 3rd party services, as well work with external auditors on external audits
• Advise on appropriate cyber security solution & technology trends to be deployed
• Perform in-depth investigation to determine the root cause of a security incident
• Conduct analysis of logs from a wide range of systems, such as firewalls, EDR, SIEM, Anti-Virus, Vulnerability management to detect various types of IT-related threats
• Monitors security event reports and actions; ensuring the appropriate response is performed and coordinated.

Ability / Competency Required:

• Bachelor's Degree in Computer Science / Information Technology or Equivalent
• At least 1 year of working experience
• Good communication and presentation skills
• Able to work well as a team player while being independent and pro-active
• Positive attitude in challenging work environment
• Degree in Computer Science/ Information Technology or equivalent
• Good interpersonal and communication skills
• Ability to work well in a team
• Ability to perform multi-tasking

Murata Electronics Singapore is committed to providing a safe and secure environment for all job applicants.
Please note that Murata Electronics Singapore does not charge any fee for job applications or interviews. If you receive any suspicious emails or messages claiming to be from Murata Electronics Singapore, please do not respond and report it to us immediately.

Responsibilities:

a) Work with internal and external stakeholders to monitor and maintain the IT security health of the Automatic Fare Collection system;

b) Participate in the analysis and resolution of IT security issues and incidents related to the Automatic Fare Collection system;

c) Participate in Automatic Fare Collection system projects and provide inputs on new security technologies as well as to assist in the review of technical implementations and processes in ensuring that proper IT security controls are in place; and

d) Assist to develop new and update existing IT security policies, standards and guidelines for the Automatic Fare Collection system.

Requirements:

a) Recognised degree in IT or Computer Engineering with at least 3 years relevant experience in IT security;
b) Good knowledge of Payment Card Industry Data Security Standard (PCIDSS) and other security best practices for payment card applications;
c) Possess good knowledge and professional experience in one or more of the following domains:
Either

1. System Security
i. Host and Endpoint security
ii. Identity and Access management
iii. Database security
iv. Network security
v. Virtualization security
vi. Application security
vii. Threat analysis
viii. Vulnerability assessment and security testing for operating systems (Windows and Unix), network (wired and wireless) and applications (web-based and others)
Or/And
2. Cryptography
i. Symmetric-key and Public-key cryptography
ii. Cryptography standards and technologies
Or/And
3. Cyber Security Operations

i. Security Information and Events Management (SIEM)

ii. Operation and management of Security Operations Centre (SOC)

d) Proven ability to plan and execute workload in a demanding and dynamic environment;

e) Excellent analytical, interpersonal and communication skills;

HOW TO APPLY:

We would like to invite interested applicants to email detailed resume in MS Word format to:

sicong@dhc.com.sg

We regret to inform that only shortlisted candidates will be notified. All applications will be treated with the strictest confidence.

Ho Si Cong

Registration number R1982598

EA License: 12C6253

Develop policy and standards for API security. Experience and knowledge in Application Programming Interface (API), static application security testing (SAST) and related tools like Veracode / Checkmarx / Fortiy. Experience and knowledge in Burp Suite tool for dynamic testing (DAST). Primarily responsible for API application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management) At least 2 years of working experience in application security that includes API, SAST and DAST along with Checkmarx, Veracode Knowledge of security technologies (encryption, data protection, design, privilege access, etc.) Proficiency in time management, communications, decision making, presentation and organizational skills Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedules Excellent decision-making, analytical and problem solving skills Excellent verbal and written communication skills to technical and non-technical audiences of various levels in the organization Experience establishing and maintaining effective working relationships with employees and/or clients Strong knowledge of development and application security Hands-on experience performing application API security assessment, static and dynamic security assessments with tools such as: Burpsuite, OWASP ZAP, AppScan, WebInspect, Fortify, Veracode, Checkmarx, etc. Knowledge of OWASP Top 10/ SANS Top 25, identify vulnerabilities via manual and automated testing methods and how to effectively remediate vulnerabilities associated with each Expert knowledge of information security principles, web applications, and intermediate familiarity with malicious code and common hacking techniques used by malicious actors Experience conducting risk assessments and performing threat modeling of applications Ability to collaborate with teams remotely

A relevant degree within IT/IM or a related field
Professional certifications in Information security from industry standard frameworks (e.g. ISACA, BCS, CIPP, ITIL, Crest, ISC2, COPTIA)
Advanced knowledge of OT systems (ICS, SCADA), network architecture, network protocols, security best practices and response processes.
Familiarity with the ISA95/98 and Purdue models for industrial IT and the typical operating practices in that engineering environment
Understanding of operational risk posed by cyber physical environments
Working knowledge of ISA95, IEC 62443 and NIST SP 800-82r3.
Familiarity with firewalls, intrusion detection/prevention systems (IDS/IPS), and network monitoring tools
Working knowledge of automated malware analysis programs
Proficiency in securing various operating systems, including Windows, Linux, and macOS
Working knowledge of SIEM and other volumetric data systems
Knowledge of industry standard security products, including end point agents, remote capturing tools and other security related products
Ability to obtain and act on vulnerability information and conduct security risk assessments,
... Click here to view more detail / apply for OT Security Operations Analyst

KEY ROLES AND RESPONSIBILITIES

• Ensure enhancement of SOC for cyber threats monitoring, detection, analysis and response through the use of threat intelligent and automation

• Project management and Vendors Management

• Drive continuous improvement of Incident Response Framework, Incident Response Plan, Event Management, Standard Operation Procedure, Playbook and etc. for cybersecurity operations and incident response

• Perform advanced trend, pattern and statistical analysis to project future technical cyber threat scenarios

• Synthesize multiple information sources and analysis reports into a holistic view of potential threats

• Conduct in-depth research into cyber security issues of industry- or nation-wide significance

• Produce findings to help initialize or support law enforcement and counterintelligence investigations or activities

• Establish incident management procedures for the detection, reporting and handling of incidents

• Develop a playbook for cyber incident management

• Perform the remediation and resolution of cyber incidents at the organizational level

• Direct post-mortem activities following critical incidents

• Work closely with internal and external parties to manage the operation of SOC

• Manage security operation to ensure implemented security technologies and controls are effective and adequate to protect our infrastructure/business

• Track and analyse cybersecurity metrics for effectiveness, benchmarking and management reporting.

QUALIFICATIONS & EXPERIENCE

• 3-5 or more years of experience in running security operations including management of Security Operation Center (SOC).

• Technical know-how and experience in IT security solutions such as (but not limited to) and at least operated in more than one of the followings:-

• Network Security : F/W, IPS, VPN, UTM, NAC

• Knowledge in Checkpoint, Juniper, Cisco, Aruba and Fortigate, CyberArk, Tripwire, will be an added advantage

• Content Security : WEB Security, Anti-Spam/Anti-Virus

• End point Security : Anti-Virus/Malware, Host base IPS, DLP, BitLocker

• Security Information Management: SIEM, Security management, Forensics

• Advance Persistence Threat Solution

• Experience in conducting detailed cyber security events investigation and analysis including leading and responding to cyber security incidents

• Familiar with Kill Chain methodology, MITRE Att&ck, NIST Cybersecurity Framework, ISO 27001, 27002 and etc.

• Relevant Cybersecurity Certifications such as CISM, CISSP, GCIH, GNFA, CCSK, CRIST will be an added advantage

About the Job

You will be tasked with triaging incidents, conducting investigations, and performing threat hunting. Additionally, you will play a key role in enhancing our threat detection capabilities across a complex organization. Other responsibilities are as follow:

• Conducts triage, incident investigations, and threat hunting.
• Reviews, updates, and creates threat detection rules using SIEM or EDR.
• Reviews, updates, creates playbooks and updates the incident response plan. Automates processes using tools such as SOAR or scripting.
• Delivers timely and relevant updates to appropriate stakeholders.
• Stays current with the evolving threat landscape, tactics, techniques, and procedures (TTPs), and is familiar with industry best practices.

Requirements

You will need min Degree in Computer Science, Information Security, Information Technology, or related field.

• Strong foundation in Cybersecurity and analytics skills with the ability to recognize information from various sources to support investigations.
• Scripting knowledge such as Python will be required.
• Knowledge in forensic analysis will be an added advantage.

R1332781

Responsibilities:

• Handling security incidents as reported by individuals and automated systems on laptops and mobile devices.

• Handling support of PC and Mac based users with security related problems.

• Monitoring compliance with IT Security policy and applicable law.

• Coordinating investigations and reporting of security incidents related to Network, Systems and applications.

• Coordinate and execute IT security projects for Arista at multiple locations.

• Engage in security research in keeping abreast of the latest security issues for Cloud enabled enterprises (including SAAS and IAAS).

• Monitoring system compliance with the IT framework for controls and levels of access; recommending improvements.

• Maintains access for business by providing information, resources, and technical support.

• Collaborate with other groups inside Arista to manage security vulnerabilities and help manage risks.

• Conduct and collaborate on laptop and server forensics as well as Cloud / Service Provider forensics with the global security team.

• Administer security-dedicated systems (Software, Firewall management, EDR, NDR, log collection, reporting , analytics, Cloud Security consoles) as appropriate.

• Perform other related duties as assigned. 

Qualifications: 

• BA or BSc. in Computer Science, Management Information Systems, Information Assurance or related field.

• Advanced degree desirable.

• Must have five+ years of progressive experience in computing and information security.

• Must have experience with networking technology, protocols.

• Expert knowledge is desired of laptop operating systems (MacOS, Windows and Linux).

• Previous experience working in a multinational corporate working environment is desirable.

• Proven experience in Cloud computing and SAAS platform security, including email security.

• Proven experience with DLP solutions is a plus.

• CISSP, GIAC or other security certifications desired. 

• Knowledge of information security standards (e.g., ISO 17799/27002, etc.), rules and regulations related to information security and data confidentiality (e.g., FERPA, HIPAA, etc.) and desktop, server, application, database, network security principles for risk identification and analysis. 

• This position requires some weekend and evening assignments as well as availability during off-hours for participation in scheduled and unscheduled activities.

Responsibilities:

• Provide Presales support on cybersecurity & PKI security products/ solutions to clients and partners.
• Execute post-sales installation, technical support (L1-L3) and maintenance services of cybersecurity & PKI products/solutions.
• Troubleshoot reported issues and collaborate with technology vendors for escalation when required.
• Ensure the completion and follow-up of daily operations and tasks.
• Provide technical support for tender submission, including technical compliance, technical solution proposal, and conducting Proof-of-Concept testing based on given bill of material.
• Evaluate and test security products and technologies for the development of new products and solutions.

Requirements:

• Diploma or Degree in IT, Computer Science, Cybersecurity, or equivalent
• 1-2 years of hands-on experience in designing, managing, and implementing cybersecurity for multi-vendor infrastructure, including:
• Microsoft based Domain Controller, DNS, DHCP, LDAP, RADIUS & AAA servers
• Microsoft based Certificate Authority, Prime Key EJBCA
• Window/Linux/UNIX OS environments
• Hardware Security Module (HSM)
• Key Management System (KMS)
• Ability to troubleshoot technical issues or perform technical setup with minimal supervision.
• Knowledge in SQL system such as MSSQL, Oracle, MYSQL is a plus.
• Familiarity with networking solutions (i.e. switching, routing) is advantageous.
• Professional certifications in cyber security or networking will be advantageous.
• Initiative with a positive working attitude.
• Hardworking and eager to learn new technologies and skills.

HOW TO APPLY:

Interested applicants, kindly send your resume in MS WORD format to ref10@trustrecruit.com.sg or please click on “Apply Now” and provide the below details in your resume.

• Last drawn salary
• Expected salary
• Notice period
• Reason for leaving

We regret only shortlisted candidates will be notified.

Important Note: Trust Recruit Pte Ltd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.sg.

Trust Recruit Pte Ltd

EA License No: 19C9950

EA Personnel: Hooi Wai Man (Samantha)

EA Personnel Reg No: R21100062

Who we are

Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) is the corporate and investment banking arm of Crédit Agricole Group, world’s 10th largest bank by total assets.

Our Singapore center (“ISAP” or “Information Systems Asia Pacific”) is the 2nd largest IT setup (after Paris Head Office) for Crédit Agricole CIB's worldwide business. We work daily with international branches located in 30 markets by:

· Envisioning and preparing the Bank’s futures information systems

· Partnering and supporting core banking flagships and transverse areas in their large scale development projects

· Providing premium In-house Banking applications

This unique positioning empowers us to bring our core banking business a sustainable competitive advantage on the market.

We seek innovative and agile people sharing our mindset to support ambitious and forthcoming technological challenges.

Position

IT Security Officer (ITSO)

IT Security Officer role is responsible for managing and supervising Information Technology Security matters for the Bank in Singapore and ensuring that the execution of Information Security activities are in alignment with Banks’ Security Policy and Standards. Person is also in charge of coordination of operational security of Information Systems, conducting Cyber Security Risk Assessment and ensuring effective management of IT Security initiatives in Singapore.

Main Responsibilities (not limited to)

• Information Systems in Singapore are in alignment with Groups’ Security Policies and Standards;
• Develop, contribute and establish local Security Policies, guidelines, standards and processes (as applicable) in conformance to Group’s Information System Security Policies, Governance Texts and local regulatory requirements.
• Conducting Information Security (Cyber) risk assessments to identify Cyber risks, develop and maintain adequate and comprehensive mitigation and deliver subsequent corrective actions when KPI results are unsatisfactory.
• Advising business teams, technology teams and leadership on implementing cyber security best practices for managing cyber and technology risks.
• Maintaining oversight on Key Cyber risk/IT Security indicators in scope;
• Maintaining oversight on the deployment of various Security Programs and projects running for the bank in the region.
• Coordinate studies on security requirements for implementing new IT Security solutions and provide consultation support on IT infrastructures and Applications teams
• Ensuring all Security related requests and derogations are reviewed and granted based on Security Risk Assessments;
• Ensuring the Vulnerabilities under the perimeter are managed and mitigated as per the defined Vulnerability Management Process;
• Assist and recommend the Local IT teams to define and implement remediation actions plans derived from audits or security reviews.
• Follow up on IT security related audit recommendation action plans falling under SG or other entities
• Maintain and Publish the Security Dashboard for Singapore for the Security KPIs;
• Supporting the IT Permanent Controls team and CLSi function on technical matters related to IT Security topics;
• Ensuring technical security projects for the region are properly taken into account and effectively delivered;
• Accompanying local IT teams in technical security topics where Security expertise and advices could be needed, to ensure proper implementation of standards and best practices;
• Acting as an entry point for all technical security related matters to assess the overall Information Systems Security;
• Raising operational security needs or constraints, or local constraints, proposing solutions and possible adaptations of standards in case they cannot cover a precise local requirement (for example due to a local regulation);
• Helping IT teams in deploying level 1 and level 2.1 controls required by ISS control plans.
• Should be able to take up additional responsibilities as needed for the operations or as assigned by the manager;
• Comply with all applicable legal, regulatory and internal Compliance requirements, including, but not limited to, the Singapore Compliance manual and Compliance policies and procedures as issued from time to time; Financial Security requirements, including, but not limited to, the prevention of Financial Crime and Fraud including reporting obligations to the Money Laundering Reporting Officer/Compliance Officer.
• Maintain appropriate knowledge to ensure to be fully qualified to undertake the role. Complete all mandatory training as required to attain and maintain competence.

Candidate Profile

• Must have a minimum 10 years of relevant experience in IT Security domain;
• Must be a bachelors/masters/engineering graduate or equivalent technical degree in Information Technology or Computer Science;
• Must have knowledge of different domains of Information Security;
• Must have prior hands-on experience in governance, managing and operating the Information System Security;
• Should have experience in working in first and second line of Cyber defense;
• Must have experience in conducting Cybersecurity Risk Assessments, security reviews of IT Projects;
• Must have experience in Security Exceptions management
• Ability to apply risk based approach while working on assigned responsibilities;
• Experience in defining, implementing, and enforcing enterprise-level Information Security Policies
• Excellent in analytical, communication and documentation skills;
• Must have strong understanding of ITIL processes and comfortable working in process oriented environment;
• Should have time management skills and able to manage work in fast moving environment;
• Should have excellent written and oral English language skills;

· Professional Certifications :

• CISSP certification is must
• Any other IT Security or Cyber Risk related certifications are desirable

Work Schedule

• Work Hours: 8.45a.m. to 6. 30p.m (Monday to Friday) with one-hour lunch break.

Company’s Profile:

As a market leader in industrial vehicles, they have over 4 decades of experience in the automotive industry. They lease many high-end vehicles to their 41,000 customer base and have been customers’ first-choice partner for many years. They are currently looking for a IT System Analyst to value-add to their business.

Work location: Tuas (company bus provided from Joo Koon MRT)

Working hours: Monday – Friday, 8.30am – 5.30pm

Company Benefits:

• Bonus payout twice in a year (mid year and end year)
• Flexi benefits $700/year
• Annual increment
• Mobile phone allowance provided

Job Responsibilities:

• Participate in the Microsoft Dynamics CRM 2013 Upgrade Project
• Deliver on-site support for organization's CRM system, ensuring smooth operations and addressing any technical issues or user queries
• Proactively gather and consolidate user feedback, analyzing and documenting suggestions, concerns and enhancement requests
• Conduct training sessions for existing sales users. Respond promptly to training requests and provide ongoing guidance and assistance.
• Collect and consolidate user feedback and follow up with vendor.
• Continuously update and maintain user manuals to ensure they reflect the latest features, enhancements and best practices of the CRM system.

Requirements:

• Educational qualification in IT / Computer Science or equivalent. Fresh grads welcome to apply, training will be provided
• Proficiency with Windows OS
• Experience with Microsoft Dynamics CRM or other Microsoft products will be an added advantage

Interested candidates may whatsapp your resume to 8494 1966. Only shortlisted applicants will be contacted.

Cassie Chan | R2197426

Recruit Now Singapore Pte Ltd | EA No: 21C0845

About us
The Science Museum Group (SMG) is here to inspire futures. As the world's leading group of science museums, we share our unparalleled collection spanning science, technology, engineering, mathematics and medicine with over five million visitors each year.

You will be joining a collaborative multi-disciplinary team, providing quality technical services to our customer and infrastructure operations along with project functions within ICT.

About the role
The ICT operating model is being changed so that light-touch analysis is shared across most of the ICT function. Joining us on a 12 month fixed term contract, you will provide the training, support, and coaching needed to support this change and produce a toolset/analysis templates for use in light-touch analysis.

As the nature of a multi-site organisation undergoing a range fo transformation, you will have a variety of projects to lead and enhance. During your time with us, you will support the following activity -

1. Training of ICT staff in analysis.
2. Wi-Fi/Local Area Network pilot and start of implementation.
3. Wide Area Network replacement (end of contract).
4. E-commerce order fulfilment and stock storage/management.
5. Collections Management system requirements definition

This role will need to dedicate for the first six months around 40 to 50% of their time in training/up-skilling and producing toolsets/templates for analysis. For the first 6 months, they will be otherwise working on the LAN/Wi-Fi pilot for most of the remainder of their time.

The last 6 months will be focused on WAN, Retail and Collections in roughly equal amounts.

This position offers the flexibility to work from home, on a hybrid basis, though some travel may be occasionally required to SMG sites, suppliers, and peer organisations.

Contract: Full time 35 hours, 12 month fixed term contract
Salary: £46,000 - £50,000 per annum

Download the Vacancy Information Pack file under 'Attachments' on this vacancy listing on the Science Museum Group website for more details about the role and the application process.

About you
You are customer focused, approachable, organised and a good listener. Keen to get involved and a natural collaborator, you can work with people of all levels to establish a technical vision and to analyse the trade-offs between usability and functional and performance needs.

You have a great aptitude in imparting your knowledge onto others, having developed colleagues in business analysis skillsets, as well as creating materials in the form of toolkits and templates.

With equal parts of business analysis experience, you have the skill to flex your style or communication to meet the needs of a range of acitivty.

Don't feel you meet all the criteria? We welcome you to apply even if your experience doesn't match directly. With your transferable skills, you could be the right candidate for this, or other opportunities that we have.

What we offer
Joining us as an employee, you will have the opportunity to develop your career in a world-class museum group. We understand that work/life balance and wellbeing is crucial to our colleagues, so we offer the perks listed below, as well as support for things that happen in life such as parental and adoption leave, sickness, and career breaks.

• Support with personal and professional development
• 27 days annual leave in addition to bank holidays
• Employee assistance programme
• Enhanced contributory pension
• Unmind App and other wellbeing support
• Interest-free loans
• Days Out discounts
• Health & Dental Insurance

Open for All is one of the Science Museum Group's five core values and sets out our important aspiration to be a place for everyone. We are working hard to understand our organisation better and to develop a culture that recognises and values different backgrounds, mindsets, skills, experience, knowledge, and expertise. By having greater diversity, we believe that we will be a stronger and better organisation, capable to continue to Inspire Futures.